Privacy Policy

Information processed now

When you make an inquiry or arrange a private viewing, Crystalline Being may process your name, email address, phone number, inquiry or booking details, specimen interest, and any request or note you choose to provide. The hosting and security platform may also generate limited request, security, and technical metadata needed to operate and protect the site.

Please do not submit sensitive personal information, health information, government identification, payment-card details, or files through inquiry or booking forms.

How information is used

Information is used to arrange private viewings, respond to inquiries, send transactional confirmations and reminders once email delivery is activated, provide customer service, prevent misuse and fraud, maintain operational records, and meet legitimate legal or accounting obligations where applicable. Crystalline Being does not currently collect marketing consent or use booking and inquiry details for marketing.

Service providers

OpenAI ChatGPT Sites and hosting infrastructure. Site content, submissions, operational data, and limited technical metadata may be processed to host, secure, and operate the application. Cloudflare infrastructure may support hosting, database, network, security, and bot-management functions.

Resend. Once transactional email delivery is activated, the customer email address and the booking details necessary to compose a confirmation, reminder, cancellation, or rescheduling message are sent to Resend. Staff booking notifications contain the customer contact details and operational request needed to prepare for the appointment.

Stripe — future and conditional. Stripe is not active for customer purchases. If commerce is enabled, Stripe-hosted Checkout will process payment details. Crystalline Being will receive and store only payment-related identifiers and order metadata needed to track and fulfill the order; raw payment-card numbers will not be stored by Crystalline Being.

Future commerce information

If commerce is enabled, Crystalline Being may process order details, fulfillment selection, shipping or delivery address where required, and payment-related identifiers or metadata needed for order processing, fraud prevention, fulfillment, refunds, accounting, and legal obligations. The policy and checkout disclosures must be reviewed before that feature is published.

Cookies, security, and analytics

The site and its hosting platform may use essential cookies or similar storage for authentication, security, bot management, and basic platform operation. Limited platform analytics may be generated where the hosting platform provides them. Crystalline Being does not currently add advertising pixels, session replay, behavioral profiling, or third-party advertising trackers.

Artificial intelligence

The customer-facing application does not intentionally send customer personal information to an AI model for profiling, recommendations, or automated decision-making. Any future use of customer information with an AI system requires a separate privacy and security review before launch.

Retention

Operational information is kept only as long as reasonably needed for the purpose described, troubleshooting, security, and applicable legal obligations. Current technical cleanup tools support shorter retention for notification and webhook troubleshooting records, appointment and internal notes, rate-limit records, expired management tokens, and abandoned commerce reservations. Those cleanup tools are not yet scheduled automatically, so no fixed deletion deadline is promised.

Working retention targets are 12–24 months for booking and inquiry operations where appropriate; 90–180 days for appointment and internal notes; 30–90 days for notification, webhook, and abandoned-reservation troubleshooting records; and 14–30 days for security/request logs where platform controls allow. Future order, payment, tax, and accounting records will be retained only for legitimate business and legal requirements and may not be deleted solely in response to a request.

Your requests

You may ask about your information or request access, correction, or deletion where applicable. Use the contact form and begin the message with “Privacy request.” Crystalline Being will verify the request as appropriate and explain any information that must be retained for security, operational, legal, or accounting reasons. This process does not represent that every privacy right applies in every jurisdiction.

Changes

This policy will be updated when commerce, customer accounts, marketing, new tracking, or new data processors are introduced. Material changes should be reviewed before the related feature is published.